PHPBB2 Plus 1.53 - 'kb.php' SQL Injection

source: https://www.securityfocus.com/bid/38828/info phpBB2 Plus is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Pars CMS - 'RP' Multiple SQL Injections

source: https://www.securityfocus.com/bid/38734/info Pars CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

Zigurrat Farsi CMS - '/manager/textbox.asp' SQL Injection

source: https://www.securityfocus.com/bid/38719/info Zigurrat Farsi CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Joomla! Component com_seek - 'id' SQL Injection

source: https://www.securityfocus.com/bid/38711/info The 'comseek' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

ARTIS ABTON CMS - Multiple SQL Injections

source: https://www.securityfocus.com/bid/38658/info ARTIS ABTON CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, acce...

OpenCart 1.3.2 - 'page' SQL Injection

source: https://www.securityfocus.com/bid/38605/info OpenCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

OpenCart 1.3.2 - page SQL Injection

OpenCart 1.3.2 - page SQL Injection source: https://www.securityfocus.com/bid/38605/info OpenCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...

XlentProjects SphereCMS 1.1 - archive.php SQL Injection

XlentProjects SphereCMS 1.1 - archive.php SQL Injection source: https://www.securityfocus.com/bid/38309/info SphereCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Aflam Online 1.0 - index.php SQL Injection

Aflam Online 1.0 - index.php SQL Injection source: https://www.securityfocus.com/bid/38147/info Aflam Online is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

ASCET Interactive Huski Retail - Multiple SQL Injections

ASCET Interactive Huski Retail - Multiple SQL Injections source: https://www.securityfocus.com/bid/38129/info Huski Retail is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...

ManageEngine OpUtils 5 Login.DO SQL Injection

================================================================================ ManageEngine OpUtils 5 "Login.DO" SQL Injection Vulnerability ================================================================================ Date-3/2/10 code by Asheesh kumar Mani Tripathi AKS IT Services Credit by...

OpenX 2.6.1 - SQL Injection

source: https://www.securityfocus.com/bid/37913/info OpenX is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, o...

PHPMySpace Gold 8.0 - 'gid' SQL Injection

source: https://www.securityfocus.com/bid/37881/info PHPMySpace Gold is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...

Blaze Apps 1.x - SQL Injection HTML Injection

Blaze Apps 1.x - SQL Injection HTML Injection source: https://www.securityfocus.com/bid/40212/info Blaze Apps is prone to multiple SQL-injection vulnerabilities and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may exploit the...

vBulletin 4.0.1 - 'misc.php' SQL Injection

source: https://www.securityfocus.com/bid/37854/info vBulletin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

pragmaMX 0.1.11 - 'modules.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/41523/info pragmaMX is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

Ampache 3.4.3 - 'login.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/37417/info Ampache is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

TestLink < 1.8.5 Multiple Vulnerabilities

TestLink is prone to multiple SQL injection SQLi and cross-site scripting XSS vulnerabilities because it fails to sufficiently sanitize user-supplied data. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

New Data Show Most Breaches Come From External Sources

New data compiled by Verizon in an addendum to its Data Breach Investigations Report shows that the vast majority of reported and investigated data breaches are the result of external incidents, not insider threats. “Incidents that result in data compromise and that prompt disclosure or outside...

Joomla! Component com_mygallery - cid SQL Injection

Joomla! Component commygallery - cid SQL Injection Bugtraq ID: 37121 Class: Input Validation Error Published: Feb 21 2008 12:00AM Updated: Nov 24 2009 10:15PM Credit: S@BUN Vulnerable: Joomla commygallery 0 The 'commygallery' component for Joomla! is prone to an SQL-injection vulnerability becaus...